PDF Injection Detector — MiMo-7B

Upload a PDF. It is rendered to text with the extractor that built the project corpus, the regions carrying structural markers are ranked and cut into batches that fit one run of the model, and MiMo-7B-RL reads the batch you choose — reporting whether a payload is hidden there, and the substring that convinced it.

Batching is what keeps a long document inside the runtime's limit: one batch is one run, and you decide how many runs to spend. The report always states how much of the file is still unread.

This is a coursework artefact built on a synthetic corpus of 1,100 PDFs carrying harmless EICAR/AMTSO/WICAR/RANSIM test markers. It is not a general malware scanner, and real malware does not announce itself the way these samples do.

Running on the GPU runtime (4-bit NF4 — Part B’s own configuration), about 4.2s per region.

Runtime

gpu = 4-bit NF4, Part B's own configuration, ~4s/region, but limited by your daily ZeroGPU quota. cpu = Q4_K_M GGUF via llama.cpp, ~2min/region, unlimited.

1 8
Batch to check

Each batch is a separate run — spend as many as you like.

Off = marker regions only, which is the shape Part B measured. On = the batches cover the whole file, at the cost of regions MiMo often will not answer about.

Adds a one-off 550 MB embedding-model download.

Upload a PDF to see what will be read.